Amazon Research And Engineering Studio — known CVE vulnerabilities

Every CVE whose affected-product data names Amazon Research And Engineering Studio, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-5707 — CVSS 8.8 (high): Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version…
• CVE-2026-5708 — CVSS 8.8 (high): Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to…
• CVE-2026-5709 — CVSS 8.8 (high): Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a…